This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File: d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier: faNejbJtY+6Hp6wdNnFJwRkVMzJJpNo3Cvbj/7DmBMg=
Subject key identifier: 8E:5E:33:B8:EC:F9:5B:74:B4:00:50:22:27:4C:9A:04:28:79:72:A2
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 019B5AF664AAE751E60D08FE0B015C92282A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number: 1057
Signing time: Fri 26 Dec 2025 14:00:55 +0000
Manifest this update: Fri 26 Dec 2025 14:00:55 +0000
Manifest next update: Sat 27 Dec 2025 14:00:55 +0000
Files and hashes: 1: 0OhTHF6DxE3cyZK5YOwOI2V2BAI.roa (hash: xOeumj9MpchTNffEKnQPdj1nuV0b4wbm3GvMqDVnZVU=)
2: D6YciS_w4aBGgTwchVv0zjl3KM8.roa (hash: 0I0L8dvu+mXVyzn+otu0YMQ4J1Sqc+LW0CCIWiAWR+s=)
3: XyMxVfTmZ9FOajmxjytII90XihY.roa (hash: Y1EWEtYGvmWwkkpTBkRX8z/3qaLQ9HzYwz0slqYxxoo=)
4: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: OslXs+8+MLTmzilvl+p0M+x2bgY52VXTVa/wUkJ/HFs=)
5: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (hash: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 11:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5a:f6:64:aa:e7:51:e6:0d:08:fe:0b:01:5c:92:28:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Dec 26 14:00:55 2025 GMT
Not After : Dec 27 14:00:55 2025 GMT
Subject: CN=8e5e33b8ecf95b74b4005022274c9a04287972a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:6a:84:05:79:95:10:ba:84:8d:27:5a:ae:
ea:58:fc:4e:86:00:82:90:1a:7c:be:37:78:9b:c4:
32:07:96:f6:60:31:59:f2:10:77:27:eb:06:74:bc:
88:45:3b:7b:cf:d0:81:cb:c8:18:80:77:01:e1:52:
5b:87:46:bb:1f:09:db:19:e2:a7:9d:f1:12:f5:77:
1a:96:1d:e9:6d:70:b0:06:94:ca:9f:c1:ad:83:bc:
db:b0:75:6f:eb:5f:8e:1a:37:c4:7c:28:5f:a8:28:
14:5a:c0:f6:b3:fe:b2:13:a5:c0:fd:bb:9f:74:00:
00:25:cf:b3:c6:a7:38:0e:6a:89:66:36:fe:09:0c:
3e:05:61:0c:6e:97:30:44:ee:83:0a:34:03:fc:b7:
b0:42:98:07:de:8d:76:8d:81:a1:3d:d8:68:9d:70:
81:23:4f:31:95:39:88:31:f0:42:b1:bb:70:04:b5:
a3:4c:d9:79:0b:12:d1:36:ad:9a:68:dd:44:52:9b:
3b:70:5b:c7:24:5e:e8:d4:28:8a:ef:85:9f:85:4d:
db:18:aa:31:c9:31:15:ee:34:55:6c:bd:28:19:d8:
80:cd:e7:bf:91:d7:f5:29:35:1e:42:18:3e:8d:91:
fb:9b:24:99:3d:bf:9d:c3:7f:b9:3f:52:ca:ca:d1:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:33:B8:EC:F9:5B:74:B4:00:50:22:27:4C:9A:04:28:79:72:A2
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f7:9b:1b:b2:48:65:15:11:b7:42:a5:7a:9e:9b:84:af:4b:
37:7a:6c:6a:00:f1:da:eb:a8:e0:b3:85:7f:00:2e:97:ef:2d:
ea:95:ee:b0:3e:ee:3e:4f:99:81:28:3d:80:48:af:98:2c:ac:
fd:54:52:37:38:4b:7f:f5:5b:5f:1f:e6:67:31:1a:6d:38:d9:
cc:d3:99:79:d0:ba:64:4a:5b:17:59:86:9c:80:f8:66:8e:b8:
f2:8e:9c:83:c7:5e:82:80:17:c2:9d:4c:b1:66:9c:ed:0a:b7:
18:a5:1e:96:d7:7a:2d:7b:ea:00:dd:37:f2:f2:8f:94:49:15:
00:a7:26:a4:e5:fa:fe:e8:02:14:cd:52:71:09:7e:9f:2e:26:
83:25:7c:6d:95:b8:4b:02:56:66:0f:21:e0:c3:13:14:51:aa:
a2:eb:18:a2:38:3b:2f:f1:3c:2e:1f:ef:ea:51:6b:1e:f7:3f:
67:61:b0:d2:b3:02:3b:9e:2e:dd:30:05:20:3d:df:5b:a8:98:
3b:ed:15:e0:fb:7a:25:92:04:c6:fc:b7:c7:4d:28:1d:81:87:
98:b4:57:39:b5:c4:b5:7f:1e:ba:9e:94:9d:8d:4c:07:13:df:
5f:8d:03:42:94:c2:ff:a7:20:75:8a:1c:01:2b:ac:30:08:bb:
7d:00:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 21:02:40 2025 by rpki-client